Extracted

• • Target
    936fec4f4692c9198d5e16e5dfb8800e02235cf053a35.exe
  • Size 284KB
  • SHA256 936fec4f4692c9198d5e16e5dfb8800e02235cf053a3580fa4dfd5e6907cbae1
  • MD5 d549bdaa241387d09550d79742bc5c66
  • SHA1 52c51e8c39d61c89d9c2dbc7fc56209d5e52cd00
  • SHA512 89b485d888cf44533f5a1d7aba2ac74227fb4ce6b810e6a53dbfbf18af89d4f21c86ace0d62b95b1a039ddc4cae1b55c988c860ebcb55532a5cd279410bd3a28
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinesupportdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2